Token management and handling system

A token service provider computing system, comprising:

• a communications interface;
• at least one processor;
• and
• at least one memory having instructions stored thereon that, when executed, cause the at least one processor to:
• receive, using the communications interface, a transaction token obtained from a transaction card during initiation of a particular transaction, wherein:
• the transaction card comprises a plurality of tokens, each of the tokens identifying a same account associated with the transaction card;
• at least one of the plurality of tokens comprises the transaction token;
• at least one of the plurality of tokens is different from another of the plurality of tokens;
• and
• the transaction token corresponds to a real primary account number associated with the transaction card, but does not itself reveal the real primary account number;
• receive, using the communications interface, an indication of a payment domain in which the transaction token is being used to attempt the particular transaction, wherein the indication of the payment domain in which the transaction token is being used indicates how the transaction token was obtained from the transaction card;
• compare the indicated payment domain in which the transaction token is being used to attempt the particular transaction with predetermined payment domain restrictions that specify particular payment domains in which particular tokens of the plurality of transaction tokens of the transaction card are permitted to be used to determine whether use of the transaction token in the indicated payment domain is permitted by the domain restrictions;
• generate an authentication result for the particular transaction based on the comparison;
• in response to the authentication result indicating that the particular transaction is not permitted by the predetermined domain restrictions:
• transmitting the authentication result to an acquirer system for routing to a merchant corresponding to the particular transaction without routing the particular transaction to any payment network;
• in response to the authentication result indicating that the particular transaction is permitted by the predetermined domain restrictions:
• transmit the authentication result to the acquirer system, wherein transmitting the authentication result to the acquirer system comprises transmitting the real primary account number associated with the transaction token to the acquirer system, wherein the acquirer system routes the particular transaction to a payment network for approval;
• identify a customer based on the real primary account number;
• and
• associate the particular transaction with the customer.

A non-transitory computer-readable medium having instructions stored thereon that, when executed, cause at least one processor to:

• receive a transaction token obtained from a transaction card during initiation of a particular transaction, wherein:
• the transaction card comprises a plurality of tokens, each of the tokens identifying a same account associated with the transaction card;
• at least one of the plurality of tokens comprises the transaction token;
• at least one of the plurality of numbers is different from another of the plurality of numbers;
• and
• the transaction token corresponds to a real primary account number associated with the transaction card, but does not itself reveal the real primary account number;
• receive an indication of a payment domain in which the transaction token is being used to attempt the particular transaction, wherein the indication of the payment domain in which the transaction token is being used indicates how the transaction token was obtained from the transaction card;
• compare the indicated payment domain in which the transaction token is being used to attempt the particular transaction with predetermined payment domain restrictions that specify particular payment domains in which particular tokens of the plurality of transaction tokens of the transaction card are permitted to be used to determine whether use of the transaction token in the indicated payment domain is permitted by the domain restrictions;
• generate an authentication result for the particular transaction based on the comparison;
• in response to the authentication result indicating that the particular transaction is not permitted by the predetermined domain restrictions:
• transmitting the authentication result to an acquirer system for routing to a merchant corresponding to the particular transaction without routing the particular transaction to any payment network;
• in response to the authentication result indicating that the particular transaction is permitted by the predetermined domain restrictions:
• transmit the authentication result to the acquirer system, wherein transmitting the authentication result to the acquirer system comprises transmitting the real primary account number associated with the transaction token to the acquirer system, wherein the acquirer system routes the particular transaction to a payment network for approval;
• identify a customer based on the real primary account number;
• and
• associate the particular transaction with the customer.